This is an automated email from the ASF dual-hosted git repository. ggregory pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/commons-parent.git
The following commit(s) were added to refs/heads/master by this push: new 5fb731b Prepare release candidate 5fb731b is described below commit 5fb731b261e9bf22b7a859c7c9280cbeb407bc91 Author: Gary Gregory <garydgreg...@gmail.com> AuthorDate: Sat Aug 26 08:40:29 2023 -0400 Prepare release candidate --- README.md | 2 +- RELEASE-NOTES.txt | 342 ++++++++++++++++++++++++++---------------------- pom.xml | 2 +- src/changes/changes.xml | 2 +- 4 files changed, 186 insertions(+), 162 deletions(-) diff --git a/README.md b/README.md index 34be735..b884e76 100644 --- a/README.md +++ b/README.md @@ -66,7 +66,7 @@ Alternatively, you can pull it from the central Maven repositories: <dependency> <groupId>org.apache.commons</groupId> <artifactId>commons-parent</artifactId> - <version>60</version> + <version>61</version> </dependency> ``` diff --git a/RELEASE-NOTES.txt b/RELEASE-NOTES.txt index bf86b8e..6e3f6b8 100644 --- a/RELEASE-NOTES.txt +++ b/RELEASE-NOTES.txt @@ -1,3 +1,27 @@ + Apache Commons Parent 61 + RELEASE NOTES + +The Apache Commons Parent team is pleased to announce the release of Apache Commons Parent 61. + +The Apache Commons Parent POM provides common settings for all Apache Commons components. + +Version 61: Maintenance and update dependencies + +Changes in this version include: + +Fixed Bugs: +o Always use version.maven-source-plugin 3.2.1 (workaround MSOURCES-143). Thanks to Gary Gregory. + + +Historical list of changes: https://commons.apache.org/proper/commons-parent/changes-report.html + +For complete information on Apache Commons Parent, including instructions on how to submit bug reports, +patches, or suggestions for improvement, see the Apache Commons Parent website: + +https://commons.apache.org/proper/commons-parent/ + +----------------------------------------------------------------------------- + Apache Commons Parent 60 RELEASE NOTES @@ -10,24 +34,24 @@ Version 60: Maintenance and update dependencies Changes in this version include: New features: -o Add SPDX SBOM in the package phase. Thanks to Gary Gregory. +o Add SPDX SBOM in the package phase. Thanks to Gary Gregory. Fixed Bugs: -o Reuse the parent POM's maven-enforcer-plugin configuration Thanks to Slawomir Jaranowski. -o Workaround MSOURCES-143 by using version.maven-source-plugin 3.2.1 on Java 8. Thanks to Gary Gregory. -o Remove property commons.source-plugin.version and reuse the parent POM's version.maven-source-plugin. Thanks to Gary Gregory. +o Reuse the parent POM's maven-enforcer-plugin configuration Thanks to Slawomir Jaranowski. +o Workaround MSOURCES-143 by using version.maven-source-plugin 3.2.1 on Java 8. Thanks to Gary Gregory. +o Remove property commons.source-plugin.version and reuse the parent POM's version.maven-source-plugin. Thanks to Gary Gregory. Changes: -o Bump JUnit from 5.9.3 to 5.10.0. Thanks to Dependabot. -o Bump maven-assembly-plugin from 3.5.0 to 3.6.0. Thanks to Dependabot. -o Bump maven-checkstyle-plugin from 3.2.2 to 3.3.0. Thanks to Dependabot. -o Bump maven-failsafe-plugin from 3.0.0 to 3.1.2. Thanks to Dependabot. -o Bump maven-surefire-plugin from 3.0.0 to 3.1.2. Thanks to Dependabot. -o Bump maven-pmd-plugin from 3.20.0 to 3.21.0. Thanks to Dependabot. -o Bump maven-project-info-reports-plugin from 3.4.3 to 3.4.5. Thanks to Dependabot. -o Bump maven-source-plugin from 3.2.1 to 3.3.0. Thanks to Dependabot. -o Bump org.apache.felix:maven-bundle-plugin from 5.1.8 to 5.1.9. Thanks to Dependabot. -o Bump org.spdx:spdx-maven-plugin from 0.6.5 to 0.7.0. Thanks to Dependabot. +o Bump JUnit from 5.9.3 to 5.10.0. Thanks to Dependabot. +o Bump maven-assembly-plugin from 3.5.0 to 3.6.0. Thanks to Dependabot. +o Bump maven-checkstyle-plugin from 3.2.2 to 3.3.0. Thanks to Dependabot. +o Bump maven-failsafe-plugin from 3.0.0 to 3.1.2. Thanks to Dependabot. +o Bump maven-surefire-plugin from 3.0.0 to 3.1.2. Thanks to Dependabot. +o Bump maven-pmd-plugin from 3.20.0 to 3.21.0. Thanks to Dependabot. +o Bump maven-project-info-reports-plugin from 3.4.3 to 3.4.5. Thanks to Dependabot. +o Bump maven-source-plugin from 3.2.1 to 3.3.0. Thanks to Dependabot. +o Bump org.apache.felix:maven-bundle-plugin from 5.1.8 to 5.1.9. Thanks to Dependabot. +o Bump org.spdx:spdx-maven-plugin from 0.6.5 to 0.7.0. Thanks to Dependabot. Historical list of changes: https://commons.apache.org/proper/commons-parent/changes-report.html @@ -51,22 +75,22 @@ Version 59: Maintenance and update dependencies Changes in this version include: New features: -o Add moditect profile for JPMS on Java >= 9. Thanks to Gary Gregory. -o Add POM property commons.javadoc.javaee8.link. Thanks to Gary Gregory. -o Add POM property commons.javadoc.javaee9.link. Thanks to Gary Gregory. -o Add POM property commons.javadoc.javaee9.1.link. Thanks to Gary Gregory. -o Add POM property commons.javadoc.javaee10.link. Thanks to Gary Gregory. -o Don't use the animal sniffer plugin on Java >=9, use the release flag instead. Thanks to Gary Gregory. +o Add moditect profile for JPMS on Java >= 9. Thanks to Gary Gregory. +o Add POM property commons.javadoc.javaee8.link. Thanks to Gary Gregory. +o Add POM property commons.javadoc.javaee9.link. Thanks to Gary Gregory. +o Add POM property commons.javadoc.javaee9.1.link. Thanks to Gary Gregory. +o Add POM property commons.javadoc.javaee10.link. Thanks to Gary Gregory. +o Don't use the animal sniffer plugin on Java >=9, use the release flag instead. Thanks to Gary Gregory. Changes: -o Bump GitHub actions in .github. Thanks to Dependabot. -o Bump versions-maven-plugin from 2.15.0 to 2.16.0 #276. Thanks to Dependabot. -o Bump buildnumber-maven-plugin from 3.1.0 to 3.2.0 #277. Thanks to Dependabot. -o Bump biz.aQute.bndlib from 6.4.0 to 6.4.1 #279. Thanks to Dependabot. -o Bump spotbugs-maven-plugin from 4.7.3.4 to 4.7.3.5 #284. Thanks to Dependabot. -o Bump org:apache:apache (parent POM) from 29 to 30. Thanks to Dependabot. -o Bump commons-release-plugin from 1.8.0 to 1.8.1. Thanks to Dependabot. -o Bump commons-build-plugin from 1.12 to 1.13. Thanks to Dependabot. +o Bump GitHub actions in .github. Thanks to Dependabot. +o Bump versions-maven-plugin from 2.15.0 to 2.16.0 #276. Thanks to Dependabot. +o Bump buildnumber-maven-plugin from 3.1.0 to 3.2.0 #277. Thanks to Dependabot. +o Bump biz.aQute.bndlib from 6.4.0 to 6.4.1 #279. Thanks to Dependabot. +o Bump spotbugs-maven-plugin from 4.7.3.4 to 4.7.3.5 #284. Thanks to Dependabot. +o Bump org:apache:apache (parent POM) from 29 to 30. Thanks to Dependabot. +o Bump commons-release-plugin from 1.8.0 to 1.8.1. Thanks to Dependabot. +o Bump commons-build-plugin from 1.12 to 1.13. Thanks to Dependabot. Historical list of changes: https://commons.apache.org/proper/commons-parent/changes-report.html @@ -90,14 +114,14 @@ Version 57: Maintenance and update dependencies Changes in this version include: New features: -o Add commons.javadoc20.java.link. Thanks to Gary Gregory. +o Add commons.javadoc20.java.link. Thanks to Gary Gregory. Changes: -o Bump cyclonedx-maven-plugin from 2.7.7 to 2.7.9 #266, #272. Thanks to Dependabot. -o Bump jacoco-maven-plugin from 0.8.9 to 0.8.10 #265. Thanks to Dependabot. -o Bump junit-bom from 5.9.2 to 5.9.3 #263. Thanks to Dependabot. -o Bump build-helper-maven-plugin from 3.3.0 to 3.4.0 #270. Thanks to Dependabot. -o Bump buildnumber-maven-plugin from 3.0.0 to 3.1.0 #271. Thanks to Dependabot. +o Bump cyclonedx-maven-plugin from 2.7.7 to 2.7.9 #266, #272. Thanks to Dependabot. +o Bump jacoco-maven-plugin from 0.8.9 to 0.8.10 #265. Thanks to Dependabot. +o Bump junit-bom from 5.9.2 to 5.9.3 #263. Thanks to Dependabot. +o Bump build-helper-maven-plugin from 3.3.0 to 3.4.0 #270. Thanks to Dependabot. +o Bump buildnumber-maven-plugin from 3.0.0 to 3.1.0 #271. Thanks to Dependabot. Historical list of changes: https://commons.apache.org/proper/commons-parent/changes-report.html @@ -121,33 +145,33 @@ Version 57: Maintenance and update dependencies Changes in this version include: Fixed Bugs: -o Fix cyclonedx-maven-plugin configuration for multi-module projects. Thanks to Herv� Boutemy. -o Drop non-reproducible Implementation-Build in jar #242. Thanks to Herv� Boutemy. -o Use Java compiler release flag when compiling with Java >= 9.]. Thanks to Gary Gregory. +o Fix cyclonedx-maven-plugin configuration for multi-module projects. Thanks to Herv� Boutemy. +o Drop non-reproducible Implementation-Build in jar #242. Thanks to Herv� Boutemy. +o Use Java compiler release flag when compiling with Java >= 9.]. Thanks to Gary Gregory. Changes: -o Bump github/codeql-action from 2.1.37 to 2.1.38 #201. Thanks to Dependabot. -o Bump cyclonedx-maven-plugin from 2.7.3 to 2.7.7 #195, #220, #253, #262. Thanks to Dependabot. -o Bump junit-bom from 5.9.1 to 5.9.2 #198. Thanks to Dependabot. -o Bump maven-pmd-plugin from 3.19.0 to 3.20.0 #206. Thanks to Dependabot. -o Bump commons.pmd-impl.version from 6.54.0 to 6.55.0 #227. Thanks to Dependabot. -o Bump maven-failsafe-plugin from 3.0.0-M7 to 3.0.0 #202, #222, #235. Thanks to Dependabot. -o Bump maven-surefire-plugin from 3.0.0-M8 to 3.0.0 #219, #236. Thanks to Dependabot. -o Bump maven-surefire-report-plugin from 3.0.0-M7 to 3.0.0 #205, #207, #221, #237. Thanks to Dependabot. -o Bump maven-checkstyle-plugin from 3.2.0 to 3.2.2 #204, #260. Thanks to Dependabot. -o Bump maven-project-info-reports-plugin from 3.4.1 to 3.4.3 #203, @262. Thanks to Dependabot. -o Bump maven-enforcer-plugin from 3.1.0 to 3.3.0 #212, #255. Thanks to Dependabot. -o Bump spdx-maven-plugin from 0.6.3 to 0.6.5 #213, #259. Thanks to Dependabot. -o Bump maven-javadoc-plugin from 3.4.1 to 3.5.0 #218. Thanks to Dependabot. -o Bump versions-maven-plugin from 2.14.2 to 2.15.0 #224. Thanks to Dependabot. -o Bump maven-assembly-plugin from 3.4.2 to 3.5.0 #226. Thanks to Dependabot. -o Bump spotbugs-maven-plugin from 4.7.3.0 to 4.7.3.4 #225, #231, #243, #254. Thanks to Dependabot. -o Bump maven-compiler-plugin from 3.10.1 to 3.11.0 #229. Thanks to Dependabot. -o Bump japicmp-maven-plugin from 0.17.1 to 0.17.2 #230. Thanks to Dependabot. -o Bump commons.javadoc.java.link from Java 7 to 8. Thanks to Gary Gregory. -o Bump minimum Maven version from 3.3.9 to 3.6.3. Thanks to Gary Gregory. -o Bump jacoco-maven-plugin from 0.8.8 to 0.8.9 #256. Thanks to Dependabot. -o Bump animal-sniffer-maven-plugin from 1.22 to 1.23 #251. Thanks to Dependabot. +o Bump github/codeql-action from 2.1.37 to 2.1.38 #201. Thanks to Dependabot. +o Bump cyclonedx-maven-plugin from 2.7.3 to 2.7.7 #195, #220, #253, #262. Thanks to Dependabot. +o Bump junit-bom from 5.9.1 to 5.9.2 #198. Thanks to Dependabot. +o Bump maven-pmd-plugin from 3.19.0 to 3.20.0 #206. Thanks to Dependabot. +o Bump commons.pmd-impl.version from 6.54.0 to 6.55.0 #227. Thanks to Dependabot. +o Bump maven-failsafe-plugin from 3.0.0-M7 to 3.0.0 #202, #222, #235. Thanks to Dependabot. +o Bump maven-surefire-plugin from 3.0.0-M8 to 3.0.0 #219, #236. Thanks to Dependabot. +o Bump maven-surefire-report-plugin from 3.0.0-M7 to 3.0.0 #205, #207, #221, #237. Thanks to Dependabot. +o Bump maven-checkstyle-plugin from 3.2.0 to 3.2.2 #204, #260. Thanks to Dependabot. +o Bump maven-project-info-reports-plugin from 3.4.1 to 3.4.3 #203, @262. Thanks to Dependabot. +o Bump maven-enforcer-plugin from 3.1.0 to 3.3.0 #212, #255. Thanks to Dependabot. +o Bump spdx-maven-plugin from 0.6.3 to 0.6.5 #213, #259. Thanks to Dependabot. +o Bump maven-javadoc-plugin from 3.4.1 to 3.5.0 #218. Thanks to Dependabot. +o Bump versions-maven-plugin from 2.14.2 to 2.15.0 #224. Thanks to Dependabot. +o Bump maven-assembly-plugin from 3.4.2 to 3.5.0 #226. Thanks to Dependabot. +o Bump spotbugs-maven-plugin from 4.7.3.0 to 4.7.3.4 #225, #231, #243, #254. Thanks to Dependabot. +o Bump maven-compiler-plugin from 3.10.1 to 3.11.0 #229. Thanks to Dependabot. +o Bump japicmp-maven-plugin from 0.17.1 to 0.17.2 #230. Thanks to Dependabot. +o Bump commons.javadoc.java.link from Java 7 to 8. Thanks to Gary Gregory. +o Bump minimum Maven version from 3.3.9 to 3.6.3. Thanks to Gary Gregory. +o Bump jacoco-maven-plugin from 0.8.8 to 0.8.9 #256. Thanks to Dependabot. +o Bump animal-sniffer-maven-plugin from 1.22 to 1.23 #251. Thanks to Dependabot. Historical list of changes: https://commons.apache.org/proper/commons-parent/changes-report.html @@ -171,12 +195,12 @@ Version 56: Maintenance and update dependencies Changes in this version include: Fixed Bugs: -o Add Privacy link to site.xml +o Add Privacy link to site.xml Changes: -o Bump apache from 28 to 29 #182. Thanks to Dependabot. -o Bump versions-maven-plugin from 2.13.0 to 2.14.2 #181, #187, #191. Thanks to Dependabot. -o Bump wagon-ssh from 3.5.2 to 3.5.3 #190. Thanks to Dependabot. +o Bump apache from 28 to 29 #182. Thanks to Dependabot. +o Bump versions-maven-plugin from 2.13.0 to 2.14.2 #181, #187, #191. Thanks to Dependabot. +o Bump wagon-ssh from 3.5.2 to 3.5.3 #190. Thanks to Dependabot. Historical list of changes: https://commons.apache.org/proper/commons-parent/changes-report.html @@ -200,27 +224,27 @@ Version 55: Maintenance and update dependencies Changes in this version include: Changes: -o Make CycloneDX work better with multi-module projects. Thanks to Gary Gregory. -o New interface methods must be default methods to maintain BC. Thanks to Gary Gregory. -o Add property commons.javadoc19.java.link. Thanks to Gary Gregory. -o Bump actions/cache from 3.0.8 to 3.0.11 #152, #155, #160. Thanks to Dependabot. -o Bump actions/checkout from 3.0.2 to 3.1.0 #154. Thanks to Dependabot. -o Bump actions/setup-java from 3.5.1 to 3.6.0 #164. Thanks to Dependabot. -o Bump actions/upload-artifact from 3.1.0 to 3.1.1 #165 Thanks to Dependabot. -o Bump github/codeql-action from 2.1.27 to 2.1.35 #162, #166, #168, #178. Thanks to Dependabot. -o Bump github/codeql-action from 2.1.23 to 2.1.31 #148, #150, #156, #172. Thanks to Gary Gregory, Dependabot. -o Bump ossf/scorecard-action from 1.1.2 to 2.0.6 #163. Thanks to Gary Gregory, Dependabot. -o Bump apache from 27 to 28 #175 Thanks to Dependabot. -o Bump JUnit from 5.9.0 to 5.9.1. Thanks to Gary Gregory. -o Bump spdx-maven-plugin from 0.5.5 to 0.6.3. Version 0.6.2 fixes NPE https://github.com/spdx/spdx-maven-plugin/issues/53 #159 Thanks to Gary Gregory, Dependabot. -o Bump pmd from 6.49.0 to 6.52.0. Thanks to Gary Gregory. -o Bump Apache Commons BCEL from 6.5.0 to 6.7.0. Thanks to Gary Gregory. -o Bump cyclonedx-maven-plugin from 2.7.1 to 2.7.3 #157, #173. Thanks to Dependabot. -o Bump spotbugs-maven-plugin from 4.7.2.0 to 4.7.3.0 #158, #170, #171. Thanks to Dependabot. -o Bump spotbugs from 4.7.2 to 4.7.3 #161. Thanks to Dependabot. -o Bump versions-maven-plugin from 2.12.0 to 2.13.0 #167. Thanks to Dependabot. -o Bump japicmp-maven-plugin from 0.16.0 to 0.17.1 #174. Thanks to Dependabot. -o Bump biz.aQute.bndlib from 6.3.1 to 6.4.0 #176. Thanks to Dependabot. +o Make CycloneDX work better with multi-module projects. Thanks to Gary Gregory. +o New interface methods must be default methods to maintain BC. Thanks to Gary Gregory. +o Add property commons.javadoc19.java.link. Thanks to Gary Gregory. +o Bump actions/cache from 3.0.8 to 3.0.11 #152, #155, #160. Thanks to Dependabot. +o Bump actions/checkout from 3.0.2 to 3.1.0 #154. Thanks to Dependabot. +o Bump actions/setup-java from 3.5.1 to 3.6.0 #164. Thanks to Dependabot. +o Bump actions/upload-artifact from 3.1.0 to 3.1.1 #165 Thanks to Dependabot. +o Bump github/codeql-action from 2.1.27 to 2.1.35 #162, #166, #168, #178. Thanks to Dependabot. +o Bump github/codeql-action from 2.1.23 to 2.1.31 #148, #150, #156, #172. Thanks to Gary Gregory, Dependabot. +o Bump ossf/scorecard-action from 1.1.2 to 2.0.6 #163. Thanks to Gary Gregory, Dependabot. +o Bump apache from 27 to 28 #175 Thanks to Dependabot. +o Bump JUnit from 5.9.0 to 5.9.1. Thanks to Gary Gregory. +o Bump spdx-maven-plugin from 0.5.5 to 0.6.3. Version 0.6.2 fixes NPE https://github.com/spdx/spdx-maven-plugin/issues/53 #159 Thanks to Gary Gregory, Dependabot. +o Bump pmd from 6.49.0 to 6.52.0. Thanks to Gary Gregory. +o Bump Apache Commons BCEL from 6.5.0 to 6.7.0. Thanks to Gary Gregory. +o Bump cyclonedx-maven-plugin from 2.7.1 to 2.7.3 #157, #173. Thanks to Dependabot. +o Bump spotbugs-maven-plugin from 4.7.2.0 to 4.7.3.0 #158, #170, #171. Thanks to Dependabot. +o Bump spotbugs from 4.7.2 to 4.7.3 #161. Thanks to Dependabot. +o Bump versions-maven-plugin from 2.12.0 to 2.13.0 #167. Thanks to Dependabot. +o Bump japicmp-maven-plugin from 0.16.0 to 0.17.1 #174. Thanks to Dependabot. +o Bump biz.aQute.bndlib from 6.3.1 to 6.4.0 #176. Thanks to Dependabot. Historical list of changes: https://commons.apache.org/proper/commons-parent/changes-report.html @@ -244,45 +268,45 @@ Version 54: SBOMs, drop JDepend, replace FindBugs with SpotBugs, dependency bump Changes in this version include: New features: -o Add .vscode/* to RAT excludes. -o Add property commons.javadoc18.java.link. Thanks to Dependabot. -o Add JUnit BOM to dependency management. -o Add CycloneDX SBOM generation #122. Thanks to Steve Springett. -o Add SPDX SBOM generation. Thanks to Gary Gregory. +o Add .vscode/* to RAT excludes. +o Add property commons.javadoc18.java.link. Thanks to Dependabot. +o Add JUnit BOM to dependency management. +o Add CycloneDX SBOM generation #122. Thanks to Steve Springett. +o Add SPDX SBOM generation. Thanks to Gary Gregory. Changes: -o Bump actions/cache from 3 to 3.0.8, #118. Thanks to Gary Gregory, Dependabot. -o Bump actions/checkout from 3 to 3.0.2. Thanks to Gary Gregory. -o Bump actions/setup-java from 2 to 3. Thanks to Gary Gregory. -o Bump apache from 24 to 27 #112, #127. Thanks to Dependabot. -o Bump build-helper-maven-plugin from 3.2.0 to 3.3.0 #105. Thanks to Dependabot. -o Bump jacoco-maven-plugin from 0.8.7 to 0.8.8. Thanks to Gary Gregory. -o Bump spotbugs from 4.5.3 to 4.7.2 #120, #143. Thanks to Gary Gregory, Dependabot. -o Bump spotbugs-maven-plugin from 4.5.3.0 to 4.7.2.0, #129, #142. Thanks to Gary Gregory, Dependabot. -o Bump maven-project-info-reports-plugin from 3.2.2 to 3.4.1 #107, #128. Thanks to Dependabot. -o Bump maven-site-plugin from 3.11.0 to 3.12.1 #108, #132. Fix [WARNING] An issue has occurred with apache-rat-plugin:0.14:rat report, skipping LinkageError org.apache.rat.mp.RatReportMojo.generate(Lorg/codehaus/doxia/sink/Sink;Ljava/util/Locale;)V, Thanks to Dependabot. -o Bump maven-bundle-plugin from 5.1.4 to 5.1.8, #111, #126, #133. Thanks to Gary Gregory, Dependabot. -o Bump net.sourceforge.pmd:pmd-* from 6.44.0 to 6.49.0, #138. Thanks to Gary Gregory, Dependabot. -o Bump maven-jxr-plugin from 3.1.1 to 3.3.0 #110, #136. Thanks to Dependabot. -o Bump maven-javadoc-plugin from 3.3.2 to 3.4.1 #114. Thanks to Dependabot, Gary Gregory. -o Bump apache-rat from 0.13 to 0.15. Thanks to Gary Gregory. -o Bump biz.aQute.bndlib from 6.2.0 to 6.3.1. Thanks to Gary Gregory. -o Bump maven-pmd-plugin from 3.16.0 to 3.19.0 #141. Thanks to Gary Gregory, Dependabot. -o Bump maven-enforcer-plugin from 3.0.0 to 3.1.0. Thanks to Gary Gregory. -o Bump org.apache.maven.wagon:wagon-ssh 3.5.1 to 3.5.2. Thanks to Gary Gregory. -o Bump maven-assembly-plugin from 3.3.0 to 3.4.2 #123. Thanks to Dependabot, Gary Gregory. -o Bump Surefire 2.22.2 to 3.0.0-M7. Thanks to Gary Gregory. -o Bump Failsafe 2.22.2 to 3.0.0-M7. Thanks to Gary Gregory. -o Bump animal-sniffer-maven-plugin from 1.21 to 1.22. Thanks to Gary Gregory. -o Bump maven-checkstyle-plugin from 3.1.2 to 3.2.0. Thanks to Gary Gregory. -o Bump japicmp-maven-plugin from 0.15.7 to 0.16.0 #140. Thanks to Gary Gregory. -o Bump versions-maven-plugin from 2.11.0 to 2.12.0 #144. Thanks to Dependabot. -o Bump maven-jar-plugin from 3.2.2 to 3.3.0 #147. Thanks to Dependabot. +o Bump actions/cache from 3 to 3.0.8, #118. Thanks to Gary Gregory, Dependabot. +o Bump actions/checkout from 3 to 3.0.2. Thanks to Gary Gregory. +o Bump actions/setup-java from 2 to 3. Thanks to Gary Gregory. +o Bump apache from 24 to 27 #112, #127. Thanks to Dependabot. +o Bump build-helper-maven-plugin from 3.2.0 to 3.3.0 #105. Thanks to Dependabot. +o Bump jacoco-maven-plugin from 0.8.7 to 0.8.8. Thanks to Gary Gregory. +o Bump spotbugs from 4.5.3 to 4.7.2 #120, #143. Thanks to Gary Gregory, Dependabot. +o Bump spotbugs-maven-plugin from 4.5.3.0 to 4.7.2.0, #129, #142. Thanks to Gary Gregory, Dependabot. +o Bump maven-project-info-reports-plugin from 3.2.2 to 3.4.1 #107, #128. Thanks to Dependabot. +o Bump maven-site-plugin from 3.11.0 to 3.12.1 #108, #132. Fix [WARNING] An issue has occurred with apache-rat-plugin:0.14:rat report, skipping LinkageError org.apache.rat.mp.RatReportMojo.generate(Lorg/codehaus/doxia/sink/Sink;Ljava/util/Locale;)V, Thanks to Dependabot. +o Bump maven-bundle-plugin from 5.1.4 to 5.1.8, #111, #126, #133. Thanks to Gary Gregory, Dependabot. +o Bump net.sourceforge.pmd:pmd-* from 6.44.0 to 6.49.0, #138. Thanks to Gary Gregory, Dependabot. +o Bump maven-jxr-plugin from 3.1.1 to 3.3.0 #110, #136. Thanks to Dependabot. +o Bump maven-javadoc-plugin from 3.3.2 to 3.4.1 #114. Thanks to Dependabot, Gary Gregory. +o Bump apache-rat from 0.13 to 0.15. Thanks to Gary Gregory. +o Bump biz.aQute.bndlib from 6.2.0 to 6.3.1. Thanks to Gary Gregory. +o Bump maven-pmd-plugin from 3.16.0 to 3.19.0 #141. Thanks to Gary Gregory, Dependabot. +o Bump maven-enforcer-plugin from 3.0.0 to 3.1.0. Thanks to Gary Gregory. +o Bump org.apache.maven.wagon:wagon-ssh 3.5.1 to 3.5.2. Thanks to Gary Gregory. +o Bump maven-assembly-plugin from 3.3.0 to 3.4.2 #123. Thanks to Dependabot, Gary Gregory. +o Bump Surefire 2.22.2 to 3.0.0-M7. Thanks to Gary Gregory. +o Bump Failsafe 2.22.2 to 3.0.0-M7. Thanks to Gary Gregory. +o Bump animal-sniffer-maven-plugin from 1.21 to 1.22. Thanks to Gary Gregory. +o Bump maven-checkstyle-plugin from 3.1.2 to 3.2.0. Thanks to Gary Gregory. +o Bump japicmp-maven-plugin from 0.15.7 to 0.16.0 #140. Thanks to Gary Gregory. +o Bump versions-maven-plugin from 2.11.0 to 2.12.0 #144. Thanks to Dependabot. +o Bump maven-jar-plugin from 3.2.2 to 3.3.0 #147. Thanks to Dependabot. Removed: -o Remove org.codehaus.mojo:jdepend-maven-plugin 2.0; it does not work with current versions of RAT and site plugins. Thanks to Gary Gregory. -o Remove FindBugs properties, use SpotBugs instead. Thanks to Gary Gregory. -o Remove Maven Clirr plugin in favor of JApiCmp. Thanks to Gary Gregory. +o Remove org.codehaus.mojo:jdepend-maven-plugin 2.0; it does not work with current versions of RAT and site plugins. Thanks to Gary Gregory. +o Remove FindBugs properties, use SpotBugs instead. Thanks to Gary Gregory. +o Remove Maven Clirr plugin in favor of JApiCmp. Thanks to Gary Gregory. Historical list of changes: https://commons.apache.org/commons-parent-pom.htmlchanges-report.html @@ -305,53 +329,53 @@ WARNING: checkstyle version has been updated; there are breaking changes which m Changes in this version include: New features: -o Add .asf.yaml to RAT excludes. -o Add versions-maven-plugin run for this build. -o Add maven-checkstyle-plugin to pluginManagement. -o Allow Maven PMD plugin to override PMD implementation jars with property "commons.pmd-impl.version". -o Add property commons.javadoc16.java.link. -o Add and use property commons.enforcer-plugin.version. -o Add SpotBugs to plugin management section. -o Add and use property commons.buildnumber-plugin.version. -o Add property commons.javadoc17.java.link. +o Add .asf.yaml to RAT excludes. +o Add versions-maven-plugin run for this build. +o Add maven-checkstyle-plugin to pluginManagement. +o Allow Maven PMD plugin to override PMD implementation jars with property "commons.pmd-impl.version". +o Add property commons.javadoc16.java.link. +o Add and use property commons.enforcer-plugin.version. +o Add SpotBugs to plugin management section. +o Add and use property commons.buildnumber-plugin.version. +o Add property commons.javadoc17.java.link. Fixed Bugs: -o Use HTTPS for Javadoc links to Oracle. -o Use HTTPS for most links to Apache. -o Rename property biz.aQute.bndlib.version -> commons.biz.aQute.bndlib.version. +o Use HTTPS for Javadoc links to Oracle. +o Use HTTPS for most links to Apache. +o Rename property biz.aQute.bndlib.version -> commons.biz.aQute.bndlib.version. Changes: -o Bump versions-maven-plugin from 2.7 to 2.10.0 #97, #101. Thanks to Dependabot, Gary Gregory. -o Bump maven-project-info-reports-plugin from 3.1.0 to 3.2.2 #19, #41, #89, #103. Thanks to Dependabot. -o Bump Jacoco from 0.8.5 to 0.8.7, #42. -o Bump actions/setup-java from v1.4.0 to v2, #18, #22. Thanks to Dependabot, Gary Gregory. -o Bump commons-build-plugin 1.11 -> 1.12 -o Bump biz.aQute.bndlib from 5.1.2 to 6.2.0, #23, #31, #64, #76. Thanks to Dependabot. -o Bump actions/checkout from 2.3.1 to 3, #15, #21, #25, #66, #71, #79. Thanks to Dependabot. -o Bump com.github.siom79.japicmp:japicmp-maven-plugin 0.14.3 -> 0.15.7, #34, #68, #93. Thanks to Gary Gregory, Depe +o Bump versions-maven-plugin from 2.7 to 2.10.0 #97, #101. Thanks to Dependabot, Gary Gregory. +o Bump maven-project-info-reports-plugin from 3.1.0 to 3.2.2 #19, #41, #89, #103. Thanks to Dependabot. +o Bump Jacoco from 0.8.5 to 0.8.7, #42. +o Bump actions/setup-java from v1.4.0 to v2, #18, #22. Thanks to Dependabot, Gary Gregory. +o Bump commons-build-plugin 1.11 -> 1.12 +o Bump biz.aQute.bndlib from 5.1.2 to 6.2.0, #23, #31, #64, #76. Thanks to Dependabot. +o Bump actions/checkout from 2.3.1 to 3, #15, #21, #25, #66, #71, #79. Thanks to Dependabot. +o Bump com.github.siom79.japicmp:japicmp-maven-plugin 0.14.3 -> 0.15.7, #34, #68, #93. Thanks to Gary Gregory, Depe ndabot. -o Bump org.apache.maven.wagon:wagon-ssh 3.4.0 -> 3.4.3, #32 -o Bump maven-pmd-plugin 3.13.0 -> 3.16.0 #91. Thanks to Gary Gregory, Dependabot. -o Bump commons.checkstyle-plugin.version 3.1.1 -> 3.1.2. -o Bump actions/cache from 2 to 3 #29, #38, #44, #102. Thanks to Dependabot. -o Bump animal-sniffer-maven-plugin from 1.19 to 1.21 #30. Thanks to Dependabot, Gary Gregory. -o Bump com.puppycrawl.tools:checkstyle from 8.40 to 9.0.2 #33, #45, #48, #54, #55, #38, #77. Thanks to Dependabot, +o Bump org.apache.maven.wagon:wagon-ssh 3.4.0 -> 3.4.3, #32 +o Bump maven-pmd-plugin 3.13.0 -> 3.16.0 #91. Thanks to Gary Gregory, Dependabot. +o Bump commons.checkstyle-plugin.version 3.1.1 -> 3.1.2. +o Bump actions/cache from 2 to 3 #29, #38, #44, #102. Thanks to Dependabot. +o Bump animal-sniffer-maven-plugin from 1.19 to 1.21 #30. Thanks to Dependabot, Gary Gregory. +o Bump com.puppycrawl.tools:checkstyle from 8.40 to 9.0.2 #33, #45, #48, #54, #55, #38, #77. Thanks to Dependabot, Gary Gregory. -o Bump maven-bundle-plugin from 5.1.1 to 5.1.4 #35, #82, #87. Thanks to Dependabot. -o Bump maven-jxr-plugin from 3.0.0 to 3.1.1 #39. Thanks to Dependabot. -o Bump maven-javadoc-plugin from 3.2.0 to 3.3.2 #43, #59, #96. Thanks to Dependabot. -o Bump commons.pmd-impl.version from 6.29.0 to 6.44.0 #46, #47, #53, #57, #62, #80, #90, #99. Thanks to Dependabot, +o Bump maven-bundle-plugin from 5.1.1 to 5.1.4 #35, #82, #87. Thanks to Dependabot. +o Bump maven-jxr-plugin from 3.0.0 to 3.1.1 #39. Thanks to Dependabot. +o Bump maven-javadoc-plugin from 3.2.0 to 3.3.2 #43, #59, #96. Thanks to Dependabot. +o Bump commons.pmd-impl.version from 6.29.0 to 6.44.0 #46, #47, #53, #57, #62, #80, #90, #99. Thanks to Dependabot, Gary Gregory. -o Bump spotbugs-maven-plugin from 4.0.4 to 4.5.3.0 #50, #60, #83, #100. Thanks to Dependabot. -o Bump spotbugs from 4.0.6 to 4.5.3. -o Bump maven-enforcer-plugin from 3.0.0-M3 to 3.0.0 #52. Thanks to Dependabot. -o Bump buildnumber-maven-plugin from 1.4 to 3.0.0 #81. Thanks to Dependabot. -o Bump maven-site-plugin from 3.9.1 to 3.11.0 #84, #98. Thanks to Dependabot. -o Bump wagon-ssh from 3.4.3 to 3.5.1 #85. Thanks to Dependabot. -o Bump checkstyle from 9.2 to 9.3 #86. Thanks to Dependabot, Gary Gregory. -o Bump maven-compiler-plugin from 3.8.1 to 3.10.1 #88. Thanks to Dependabot, Gary Gregory. -o Bump maven-jar-plugin from 3.2.0 to 3.2.2 #92. Thanks to Dependabot. -o Bump commons-release-plugin from 1.7 to 1.8.0. Thanks to Gary Gregory. +o Bump spotbugs-maven-plugin from 4.0.4 to 4.5.3.0 #50, #60, #83, #100. Thanks to Dependabot. +o Bump spotbugs from 4.0.6 to 4.5.3. +o Bump maven-enforcer-plugin from 3.0.0-M3 to 3.0.0 #52. Thanks to Dependabot. +o Bump buildnumber-maven-plugin from 1.4 to 3.0.0 #81. Thanks to Dependabot. +o Bump maven-site-plugin from 3.9.1 to 3.11.0 #84, #98. Thanks to Dependabot. +o Bump wagon-ssh from 3.4.3 to 3.5.1 #85. Thanks to Dependabot. +o Bump checkstyle from 9.2 to 9.3 #86. Thanks to Dependabot, Gary Gregory. +o Bump maven-compiler-plugin from 3.8.1 to 3.10.1 #88. Thanks to Dependabot, Gary Gregory. +o Bump maven-jar-plugin from 3.2.0 to 3.2.2 #92. Thanks to Dependabot. +o Bump commons-release-plugin from 1.7 to 1.8.0. Thanks to Gary Gregory. Historical list of changes: https://commons.apache.org/commons-parent-pom.htmlchanges-report.html diff --git a/pom.xml b/pom.xml index ff7d04b..c4c3567 100644 --- a/pom.xml +++ b/pom.xml @@ -96,7 +96,7 @@ <commons.rc.version>RC1</commons.rc.version> <commons.jira.id>COMMONSSITE</commons.jira.id> <!-- Commons Release Plugin --> - <commons.bc.version>59</commons.bc.version> + <commons.bc.version>60</commons.bc.version> <commons.release.isDistModule>true</commons.release.isDistModule> <commons.releaseManagerName>Gary Gregory</commons.releaseManagerName> <commons.releaseManagerKey>86fdc7e2a11262cb</commons.releaseManagerKey> diff --git a/src/changes/changes.xml b/src/changes/changes.xml index fe842f6..812e5a1 100644 --- a/src/changes/changes.xml +++ b/src/changes/changes.xml @@ -60,7 +60,7 @@ The <action> type attribute can be add,update,fix,remove. --> <body> - <release version="61" date="2023-MM-DD" description="Version 60: Maintenance and update dependencies"> + <release version="61" date="2023-08-26" description="Version 60: Maintenance and update dependencies"> <!-- FIX --> <action type="fix" dev="ggregory" due-to="Gary Gregory">Always use version.maven-source-plugin 3.2.1 (workaround MSOURCES-143).</action> <!-- ADD -->